sysop@hub:~/tools/password-strength$

password-strength

Type a password or passphrase to see its entropy and estimated crack time under different attack speeds. The analysis runs entirely in your browser: nothing you type is transmitted, logged or stored, not even locally. The optional breach check further down is the one exception, and it only happens if you press its button.

Crack-time estimates are rough and assume no reuse of this password elsewhere, no pattern an attacker could guess (keyboard walks, dates, dictionary words with substitutions), and that the attacker only tries brute force. A long, unique passphrase is usually both stronger and easier to remember than a short complex password. For generating one, see the password generator.

Related: password generator cryptography quick reference security self-check